Product by Fasterxml

    Jackson-core

    8 known vulnerabilities in Jackson-core (Fasterxml), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Jackson-core (Fasterxml)
    HighCVE-2026-68498

    FasterXML Jackson-core: Uncontrolled Resource Consumption

    7.5
    HighCVE-2025-52999

    FasterXML Jackson-core: Stack-based Buffer Overflow

    also in 7 other products

    —
    HighCVE-2026-68494

    FasterXML Jackson-core: Allocation of Resources Without Limits or Throttling

    also in 3 other products

    —
    HighCVE-2026-89407

    jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()

    also in 1 other product

    7.5
    HighCVE-2026-89425

    FasterXML Jackson-core: Allocation of Resources Without Limits or Throttling

    also in 2 other products

    7.5
    HighCVE-2026-29062

    FasterXML Jackson-core: Allocation of Resources Without Limits or Throttling

    also in 1 other product

    7.5
    MediumCVE-2026-18401

    FasterXML Jackson-core: Allocation of Resources Without Limits or Throttling

    also in 3 other products

    —
    MediumCVE-2025-49128

    Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

    also in 3 other products

    4.0

    All products by Fasterxml